Secure managed devices with Microsoft 365 Business Premium

Microsoft 365 Business Premium includes Microsoft Defender for Business to help protect your organization's devices from ransomware, malware, phishing, and other threats.

Note

This article applies primarily to managed devices. Guidance for protecting unmanaged devices is available here: Set up unmanaged (BYOD) devices.

Learn more about managed and unmanaged devices.

Your tasks are to:

1. Upgrade eligible devices to the latest version of Windows. See Upgrade Windows devices running Windows 7 Pro, Windows 8 Pro, or Windows 8.1 Pro to Windows 10 or 11 Pro.

2. Protect devices with Defender for Business. See Onboard devices to Defender for Business and apply security policies.

3. If you have Windows computers to set up or reset, see Use Windows Autopilot to set up and configure new devices, or to reset, repurpose, and recover devices.

4. Get Microsoft 365 Apps installed on devices. See Manage Microsoft 365 installation options for devices.

See also

• Manage devices in Microsoft Defender for Business
• Set up a security operations process.
• Learn about security incident management.
• Learn how to maintain your environment.